Seems like ERD Commander is the better choice in this case. There's also a
free Linux bootdisk out on the net that can do the same thing.

In either case, you're really talking about telling someone to boot off a
floppy, and walk through a few quick steps and you can change the admin
password without much effort.

Of course, this also goes to show why physical security is so important - if
people can physically get to your servers, you can't stop them.

Roger
------------------------------------------------------
Roger D. Seielstad - MCSE
Sr. Systems Administrator
Inovis - Formerly Harbinger and Extricity
Atlanta, GA


> -----Original Message-----
> From: Don Murawski (Lenox) [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, December 30, 2002 10:31 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ActiveDir] recovering a computer
> 
> 
> The computer was deleted from the an OU.
> Now the local administrator password was and is lost.
> My question is?   Can I do a restore of that OU to recover 
> the computer account.
> The server is a remote location.
> So, restoring the administrator password will be tough.
> 
>       -----Original Message-----
>       From: Rick Kingslan [mailto:[EMAIL PROTECTED]] 
>       Sent: Monday, December 30, 2002 10:24 PM
>       To: [EMAIL PROTECTED]
>       Subject: RE: [ActiveDir] recovering a computer
>       
>       
>       Ahhh..OK - different issue.  If the administrator 
> password was lost on a system, recovering the computer object 
> is not going to help.  Using a tool like ERD from Winternals 
> at www.winternals.com would be a reasonable solution.
>        
>       Or, are we talking about the administrator password in 
> AD?  If so, pwdump and L0phtCrack has been used successfully 
> in this case - given the right conditions.
>        
>       Rick Kingslan  MCSE, MCSA, MCT
>       Microsoft MVP - Active Directory
>       Associate Expert
>       Expert Zone - www.microsoft.com/windowsxp/expertzone
>       
>       
>       
>       
> 
>               -----Original Message-----
>               From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]] On Behalf Of Don 
> Murawski (Lenox)
>               Sent: Monday, December 30, 2002 8:50 PM
>               To: '[EMAIL PROTECTED]'
>               Subject: RE: [ActiveDir] recovering a computer
>               
>               
>               the administrator password was lost
> 
>                       -----Original Message-----
>                       From: Rick Kingslan [mailto:[EMAIL PROTECTED]] 
>                       Sent: Monday, December 30, 2002 9:46 PM
>                       To: [EMAIL PROTECTED]
>                       Subject: RE: [ActiveDir] recovering a computer
>                       
>                       
>                       Hmmmm.  I've usually found it much 
> easier to join the computer to a workgroup (pick the name... 
> doesn't matter) then, reboot as directed.  Join the computer 
> back to the domain, reboot again, as directed.  Move the 
> computer object from the Computer Container to the appropriate OU.
>                        
>                       It's not worth the time, IMHO, to 
> recover a single computer object.  Now, if this was computer 
> of great importance that it is no longer in AD and cannot be 
> simply recreated and password synched via the method outlined 
> above - give us the scenario.  The collective knowledge 
> should be able to help.
>                        
>                       Rick Kingslan  MCSE, MCSA, MCT
>                       Microsoft MVP - Active Directory
>                       Associate Expert
>                       Expert Zone - 
> www.microsoft.com/windowsxp/expertzone
>                       
> 
>                       
>                       
>                       
> 
>                               -----Original Message-----
>                               From: 
> [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]] On > Behalf Of Don 
> Murawski (Lenox)
>                               Sent: Monday, December 30, 2002 7:43 PM
>                               To: [EMAIL PROTECTED]
>                               Subject: [ActiveDir] recovering 
> a computer
>                               
>                               
>                               Does anyone know how to recover 
> a deleted computer account in AD?
>                                
>                                
>                               Don L Murawski
>                               Sr. Network Administrator - 
> MCSE 4.0, 2000
>                               WorldTravel BTI
>                               1055 Lenox Park Blvd
>                               Suite 420
>                               Atlanta, GA 30319
>                               Phone: (404) 923-9468
>                               Fax:     (404) 949-6710
>                               Cell:     (678) 549-1264
>                                
> 
> 
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to